-
Bug
-
Resolution: Done-Errata
-
Undefined
-
None
-
rhel-8.6.0
-
None
-
Important
-
rhel-sst-network-drivers
-
ssg_networking
-
None
-
False
-
-
None
-
None
-
None
-
None
-
If docs needed, set a value
-
-
Unspecified
-
None
Description of problem:
rdma-ndd service runs as unconfined_service_t
$ cat sos_commands/selinux/ps_auxZww | grep unconfined_service
system_u:system_r:unconfined_service_t:s0 root 2442 0.0 0.0 42364 2120 ? Ss 11:59 0:01 /usr/sbin/rdma-ndd --systemd
This is breaking CIS compliance rule
Version-Release number of selected component (if applicable):
OpenShift 4.11
rdma-core-37.2-1.el8.x86_64
How reproducible:
100%
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
